Migrated Account from Snow Leopard Will Not Authenticate in High Sierra

Originator:ferguspa
Number:rdar://35012954 Date Originated:10/16/2017
Status:Closed Resolved:10/26/2017
Product:macOS Product Version:10.13.0
Classification:Serious Bug Reproducible:Always
 
Summary: When using Migration Assistant on macOS 10.13.0 Supplemental Update, an account migrated from a Mac OS X 10.6 migration source cannot log in.

Steps to Reproduce:
- Install Mac OS X 10.6 on a computer and apply all available updates.
- Start the Mac OS X 10.6 computer in Target Disk Mode
- Install macOS 10.13.0 Supplemental on a computer
- Start the macOS 10.13.0 computer
- Step through the Setup Assistant until the Migration Assistant is reached
- Attach the Mac OS X 10.6 computer to the macOS 10.13 computer
- Migrate everything from the Mac OS X 10.6 computer
- Allow the migration to complete and the macOS 10.13 computer to restart
- Attempt to log in as the migrated user

Expected Results:
- The migrated user can log in

Actual Results:
- The migrated user cannot log in

It appears the Mac OS X 10.6.8-provided SHA1 hash is no longer acceptable/importable to the now-absolutely-required-as-of-High Sierra salted SHA512 PBKDF2 password hash.

Version/Build:
- Mac OS X 10.6.8 10K549, MacBookPro8,1
- macOS 10.13.0 Supplemental Update 17A405, iMac9,1

Configuration:
"resetpassword" from Recovery is capable of (re)setting the password properly.  Beyond that if the original password is set with "resetpassword" that the automatic login (saved at /etc/kcpassword) is successful.

I've attached a copy of the dslocal user record as it was copied by Migration Assistant to the macOS 10.13.0 Supplemental Update computer.

Comments

Engineering has determined that your bug report (35012954) is a duplicate of 33912346 and will be closed.


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!